Samsung One UI 9 Locks Devices After 13 Wrong PIN Attempts

Samsung is implementing among the strictest lock screen security policies in the Android ecosystem with One UI 9, permanently locking devices after just 13 failed PIN, pattern, or password attempts. Once that threshold is reached, the only path to regain access is a full factory reset.

Progressive Lockout with Smart Counting

The lockout mechanism follows a progressive structure. After 12 incorrect attempts, the device imposes a 24-hour waiting period before permitting the final 13th attempt. Samsung also introduced "smart counting" logic: repeatedly entering the same wrong PIN or password does not stack multiple failures against the tally, preventing accidental lockouts from muscle-memory mistakes.

Biometrics Don't Bypass the Risk

Users cannot rely solely on fingerprint or face recognition to avoid this scenario. Android security protocols mandate backup PIN or password entry every 72 hours, meaning even biometric-heavy users must remember their credentials or face the reset consequence.

First Devices and Broader Context

The Galaxy Z Fold 8, Z Fold 8 Ultra, and Z Flip 8 will be the first devices shipping with One UI 9. Samsung's approach exceeds Google's Android 17 baseline, which reduced failed attempt allowances from 1,800 over five years to just 20 (some sources cite 19 before full lockout). Samsung's 13-attempt cap represents a notably more aggressive stance.

The Trade-Off: Security Versus Convenience

This shift dramatically increases protection against brute-force attacks but creates high-stakes scenarios for users who forget credentials. Since Samsung cannot recover forgotten passwords, users depend heavily on cloud backups and the ability to authenticate Google or Samsung accounts to bypass Factory Reset Protection after a wipe.

The policy reflects an industry-wide recalibration toward data security over recovery convenience. For Samsung users, the message is clear: remember your PIN, or lose everything.